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CLAIMS 

What is claimed is: 

1 . A method of determining distinct occurrences of a pattern in one or 
5 more sequences of time-stamped event instances, the method comprising: 

determining a maximum cardinality of disjoint occurrences of the pattern in 
the one or more sequences. 

2. The method of claim 1 wherein determining the maximum cardinality 
1 0 comprises counting a quantity of disjoint occurrence sets in the one or more 

sequences. 

3. The method of claim 1 wherein determining the maximum cardinality 
comprises: 

1 5 determining occurrences of the pattern in the one or more sequences; and 

identifying a disjoint occurrence from the occurrences. 

4. The method of claim 3, further comprising determining the maximum 
cardinality as a function of counting a quantity of identified disjoint occurrences. 

20 

5. The method of claim 3 wherein identifying occurrences includes 
matching event instances to a group within the pattern, and matching matched 
groups to the pattern. 

25 6. The method of claim 5 wherein matching event instances to a group 

within a pattern includes determining that the matched event instances are within 
a group window size constraint of the group. 

7. The method of claim 5 wherein matching matched groups to the pattern 
30 includes applying an upper time gap constraint of the pattern to the two or more 
matched groups. 
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8. The method of claim 5 wherein matching matched groups to the pattern 
includes applying a lower time gap constraint of the pattern to the two or more 
matched groups. 

9. The method of claim 5, further comprising removing an event instance 
that is included in the identified disjoint occurrence from the sequence of time- 
stamped event instances. 

10. The method of claim 9, further comprising repeating the method to 
identify further disjoint occurrences wherein the removed event instances are not 
included in the identification of more than one disjoint occurrence of the pattern. 

1 1 . The method of claim 5, further comprising flagging an event instance 
that is included in the identified disjoint occurrence from the sequence of time- 
stamped event instances. 

12. The method of claim 1 1 , further comprising repeating the method to 
identify further disjoint occurrences wherein the flagged event instances are not 
included in the identification of more than one disjoint occurrence of the pattern. 

1 3. The method of claim 3 wherein a first occurrence is disjoint from a 
second occurrence when an intersection of event instances between the first 
occurrence and the second distinct occurrence is null. 

14. The method of claim 3 wherein a first occurrence is disjoint to a 
second occurrence when an event instance occurs in only one of the first 
occurrence and the second occurrence. 

15. The method of claim 3 wherein the event instances within the 
sequence are categorized into a predetermined set of categories. 
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16. The method of claim 3 wherein identifying occurrences includes 
matching categories of event instances to a group within the pattern, and 
matching matched categories to the pattern. 

17. The method of claim 1 wherein determining includes: 
matching a group of event categories to the sequence to identify an 

occurrence of the group within the sequence; 

identifying a fully matched group wherein the event instances comprising 
the matched group are within a temporal window width defined by the group; 

identifying an occurrence of the pattern by determining that a first matched 
group is within a temporal window of a second matched group, said temporal 
window defining the temporal relationship between the first group and the second 
group; 

identifying event instances composing each identified pattern occurrence; 
identifying disjoint occurrences from the identified pattern occurrences, 
wherein a particular event instance is an event instance in only one disjoint 
occurrence of the pattern; and 

summing a count of all identified disjoint occurrences, said sum being the 
maximum cardinality of the pattern in the sequence. 

18. The method of claim 1 wherein a parameter defining the pattern is at 
least one from the group consisting of an event instance, a category, a group, a 
minimum time gap, a maximum time gap, and a window size. 

25 19. The method of claim 1 wherein the sequence comprises a temporal 

overlap of at least one occurrence of the pattern with another occurrence of the 
pattern. 

20. The method of claim 1 wherein the time-stamped event instances are 
30 one or more events from the group consisting of an operation of a work device, a 
purchase, a bid, an action, a message, an event, and a score. 
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21 . The method of claim 1 wherein a work device is an airplane and the 
time-stamped event instances are events associated with operations of the 
airplane. 

5 22. The method of claim 21 wherein the disjoint occurrence is indicative of 

a required maintenance procedure associated with the work device. 

23. The method of claim 1 wherein the two or more sequences are 
indicative of two or more airplanes comprising a fleet of airplanes and the time- 

10 stamped event instances are events associated with operations of the two or 
more airplanes within the fleet of airplanes. 

24. The method of claim 1 wherein an event instance includes one or 
more from the group consisting of a purchase, a sale, a transaction, a score, an 

15 alarm, a failure, an action, a bid, an omission, a request, an order, a message, an 
attempt, an interruption, a cancellation, and a change of a parameter. 

25. A method of estimating an expected quantity of distinct occurrences of 
a pattern in a sequence of time-stamped events, said time stamped events being 

20 assigned to event categories, said pattern having a first event category and a 

second event category, the second event category being within a time gap of the 
first event category, said time gap having a minimum time gap and a maximum 
time gap, said sequence having a maximum time length, the method comprising: 
counting instances of the first event in the sequence; 

25 counting instances of the second event in the sequence; and 

determining the expected quantity of distinct occurrences of the pattern as 
a function of the quantity of first event instances, the quantity of second event 
instances, the maximum time length of the sequence, the minimum time gap, and 
the maximum time gap. 



26. The method of claim 25 wherein determining the expected quantity of 
distinct occurrences of the pattern includes calculating a lower bound and an 
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upper bound of a mean of the expected quantity of distinct occurrences of the 
pattern in the sequence. 

27. The method of claim 26 wherein calculating the lower bound and the 
5 upper bound of the mean of the expected quantity of distinct occurrences is a 

function of the minimum time gap and the maximum time gap over the maximum 
time length of the sequence. 

28. The method of claim 26 wherein calculating the lower bound and the 
10 upper bound of the mean includes: determining an initial lower bound and an 

initial upper bound of the mean as a function of one or more from the group 
consisting of an estimation coefficient, an alternating adjustment factor, a base 
estimation of the mean of the expected quantity, an incremental estimation 
parameter, a estimation adjustment parameter, an estimation precision objective, 
15 the maximum time length of the sequence, the minimum time gap, and the 
maximum time gap. 

29. The method of claim 26 wherein determining the expected quantity of 
distinct occurrences of the pattern comprises: 

20 calculating a base estimation of a mean of an expected maximum 

cardinality; 

determining an initial lower bound of the mean of the expected maximum 
cardinality as a function of the base estimation and an incremental estimation 
parameter; 

25 determining an initial upper bound of the mean of the expected maximum 

cardinality as a function of the base estimation, an incremental estimation 
parameter, and an estimation adjustment parameter. 

30. The method of claim 29, further comprising: 

30 recalculating at least one of the initial lower bound and the initial upper 

bound of the mean of the expected maximum cardinality to determine at least 
one of a refined lower bound and a refined upper bound when the difference 
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between the initial upper bound and the initial lower bound is greater than a 
precision objective. 

31 . The method of claim 30 wherein the precision objective is the product 
5 of an estimation precision objective and at least one of the initial lower bound and 
the refined lower bound. 

• 32. The method of claim 30 wherein recalculating continues until the 
difference between a calculated upper bound and a calculated lower bound is 
10 less than or equal to the precision objective. 

33. The method of claim 25 wherein the pattern comprises a complex 
pattern, said complex pattern having two or more sub-patterns wherein at least 
one sub-pattern includes two or more events, further comprising: 

segmenting the complex pattern into a first sub-pattern and a second sub- 
pattern; 

counting a quantity of the first sub-pattern in the sequence; and 
counting a quantity of the second sub-pattern in the sequence, 
wherein determining the expected quantity of distinct occurrences of the 
complex pattern is a function of the quantity of the first sub-pattern and the 
quantity of the second sub-pattern. 

40. A method of identifying a surprise pattern within a sequence of time- 
stamped event instances, the method comprising: 

calculating an expected quantity of distinct occurrences of a pattern in the 
sequence; 

determining a maximum cardinality of the pattern in the sequence; and 
identifying the surprise pattern as a function of the estimated quantity of 
distinct occurrences and the maximum cardinality. 

41 . The method of claim 40 wherein determining a surprise pattern 
includes determining an occurrence ratio as the ratio of the maximum cardinality 
over the expected quantity of distinct occurrences. 
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42. The method of claim 41 wherein an occurrence ratio greater than a 
predetermined surprise pattern threshold is indicative of a surprise pattern. 

43. The method of claim 42 wherein the predetermined surprise pattern 
threshold is 20 percent. 

44. The method of claim 40 wherein the maximum cardinality is a sum of 
a number of disjoint occurrences of the pattern in the sequence. 

45. The method of claim 44 wherein a first disjoint occurrence is disjoint 
from a second disjoint occurrence such that an event instance is present in only 
one of the first disjoint occurrence and the second disjoint occurrence. 



15 46. The method of claim 40 wherein determining the maximum cardinality 

includes: 

identifying occurrences of the pattern in the sequence; and 
identifying a disjoint occurrence from the occurrences. 

20 47. The method of claim 40 wherein calculating the expected quantity of 

discrete occurrences includes: 

counting first event instances in the sequence; 
counting second event instances in the sequence; and 
determining the expected quantity of distinct occurrences of the pattern as 
25 a function of the quantity of first event instances, the quantity of second event 

instances, a maximum time length of the sequence, and a minimum time gap and 
a maximum time gap between the second event instance and the first event 
instance. 

30 48. A system for determining distinct occurrences of a pattern in a 

sequence of time-stamped event instances, the system comprising: 
means for storing the sequence; 
means for defining the pattern; and 
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means for determining a maximum cardinality of disjoint occurrences of 
the pattern in the sequence. 

49. The system of claim 48 wherein the time-stamped event instances 
5 include events associated with an operation of an aircraft. 

50. Computer readable medium including computer executable 
instructions for determining distinct occurrences of a pattern in a sequence of 
time-stamped event instances, the computer instructions comprising means for 

1 0 determining a maximum cardinality of disjoint occurrences of the pattern in the 
sequence. 

51 . A system for estimating an expected quantity of distinct occurrences 
of a pattern in a sequence of time-stamped events, time stamped events being 

1 5 assigned to event categories, said pattern having a first event category and a 

second event category, the second event category being within a time gap of the 
first event category, said time gap having a minimum time gap and a maximum 
time gap, said sequence having a maximum time length, the system comprising: 
means for counting instances of the first event in the sequence; 

20 means for counting instances of the second event in the sequence; and 

means for determining the expected quantity of distinct occurrences of the 
pattern as a function of the quantity of first event instances, the quantity of 
second event instances, the maximum time length of the sequence, the minimum 
time gap, and the maximum time gap. 

25 

52. Computer readable medium including computer executable 
instructions for estimating an expected quantity of distinct occurrences of a 
pattern in a sequence of time-stamped events, time stamped events being 
assigned to event categories, said pattern having a first event category and a 

30 second event category, the second event category being within a time gap of the 
first event category, said time gap having a minimum time gap and a maximum 
time gap, said sequence having a maximum time length, the computer 
executable instructions comprising: 
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means for counting instances of the first event in the sequence; 
means for counting instances of the second event in the sequence; and 
means for determining the expected quantity of distinct occurrences of the 
pattern as a function of the quantity of first event instances, the quantity of 
5 second event instances, the maximum time length of the sequence, the minimum 
time gap, and the maximum time gap. 

53. A system for identifying a surprise pattern within a sequence of time- 
stamped event instances, x the system comprising: 

means for storing the sequence of time-stamped event instances; 
means for defining the pattern; 

means for calculating an expected quantity of distinct occurrences of a 
pattern in the sequence; 

means for determining a maximum cardinality of the pattern in the 
sequence; and 

means for identifying the surprise pattern as a function of the estimated 
quantity of distinct occurrences and the maximum cardinality. 

54. The system of claim 53 wherein the time-stamped event instances are 
20 events associated with an operation of an aircraft. 

55. The system of claim 54 wherein the surprise pattern is indicative of a 
required maintenance procedure on the aircraft. 

25 56. Computer readable medium including computer executable 

instructions for identifying a surprise pattern within a sequence of time-stamped 

event instances, the computer instructions comprising: 

means for calculating an expected quantity of distinct occurrences of a 

pattern in the sequence; 
30 means for determining a maximum cardinality of the pattern in the 

sequence; and 

means for identifying the surprise pattern as a function of the estimated 
quantity of distinct occurrences and the maximum cardinality. 
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APPENDIX A 

1 initialization 

1.1 setc=0, j=0, and i=0 

2 if (0 < i < m) e.g., within the range of S, then 

5 2.1 if (group j not fully matched AND i < m), then 

2.1 .1 match event i against group j 

2.1.2 increase i by 1 

2.1 .3 if all event categories in group j are matched BUT coj 

violated), then 

10 2.1.3.1 make h to be the smallest index such that T(e h )^T(ej) - o)j 

2.1.3.2 setitoh 

2.1 .3.3 remove all matches in group j 

2.1.4 go to 2.1 

2.2 if group j cannot be matched and i > m, then go to 3 
1 5 2.3 else if p H is violated, then 

2.3.1 make i the smallest index such that T(e h )> (latest time in 

group j)-pj 

2.3.2 decrease j by 1 to rework the previous group 

2.4 else // group j succeed 

20 2.4.1 increase i so that T(ej)>dj + e.g., make i the latest time in 

group j 

2.4.2 ifc>0, then 

2.4.2.1 increase i so that T(ej)>(earliest time in group j) in the last 

matched occurrence) 
25 2.4.3 increase j by 1 

2.5 if j equals g, i.e., current occurrence is fully matched, then 

2.5.1 increase c by 1 

2.5.2 remove event instances in current matched occurrence 

2.5.3 reset j = 0 

30 2.5.4 direct i to point to the event right after earliest event in the 

current matched occurrence 

2.6 go to 2 

3 report c 
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